Remote WAF Operations Engineer — Cloudflare/Imperva & Terraform

EY; Grand Rapids (MI); Hybrid; USD 105,000 - 219,000; Full time

Benefits offered by this job

Medical and dental coverage

401(k) pension plan

Paid time off

Job summary

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications and data. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to improve overall security posture.

The role emphasizes hands-on WAF administration, incident response, and policy development, with a focus on Terraform IaC and cloud-based WAF platforms like Cloudflare and Imperva.

Qualifications

• Bachelor’s degree in CS/IT/Cybersecurity or related field.
• 3–5 years of web application security operations experience with WAF.
• Hands-on experience with Cloudflare and Imperva.
• Terraform experience for IaC and automation.
• Knowledge of ITIL processes and incident management.
• Certifications like CISSP or Security+ are a plus.

Responsibilities

• Configure, manage, and optimize WAF solutions to protect web applications.
• Provide ongoing operational coverage of web application firewalls.
• Monitor application traffic and security events to identify threats.
• Analyze security incidents and perform root cause remediation.
• Collaborate with incident response teams to respond to incidents.
• Develop and maintain WAF policies and documentation.
• Support security audits and assessments.
• Stay current with emerging threats and technologies.
• Utilize WAF solutions including Cloudflare and Imperva; implement IaC with Terraform.
• Mentor junior engineers on WAF management and incident response.

Skills

WAF management

Terraform

Cloudflare

Imperva

Incident response

ITIL

Education

Bachelor’s degree in CS/IT/Cybersecurity or related field

Tools

Cloudflare

Imperva

Job description

EY is seeking a WAF Operations Solution Engineer to configure and maintain web application firewalls, protecting client applications and data. You will monitor traffic, analyze security events, and respond to incidents while collaborating with cross-functional teams to improve overall security posture.

The role emphasizes hands-on WAF administration, incident response, and policy development, with a focus on Terraform IaC and cloud-based WAF platforms like Cloudflare and Imperva.